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DETAILED ACTION 



Claim Rejections - 35 USC § 103 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness 
or nonobviousness. 

This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
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consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

Claims 1, 2, 5-12, 15-21, and 24-40 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Meier et al. (U.S. Patent Publication # 20050185626), in 
view of Palekar et al. (U.S. Patent Publication #20030226017). 

Consider claim 1, Meier et al. clearly disclose and show a computer 
implemented method comprising: 

at a network access device (fig. 3 (102)) communicably coupled to a host 
network (paragraph 0004 (network)), sensing a user device (fig. 3 (302), paragraph 
0032 (WSTA attempting to gain access to AP)) coupled to a port of a network access 
device (paragraph 0032 (attempting to gain access to AP)); and 

placing the port into a semi-authorized access state (paragraph 0022 (default 
guest set)) the semi-authorized access state providing the user device with limits 
access (paragraph 0022 (restricted access)). 

However, Meier et al. do not specifically disclose determining if said user device 
supports a user authentication protocol. 

In the same field of endeavor, Palekar et al. clearly show determining if the user 
device supports a user authentication protocol used by the host network (para. 0049 (if 
user supports authentication protocol)), the determining comprising polling the user 
device for the user authentication protocol (para. 0049 (send a EAP request)), the user 
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authentication protocol comprising a protocol to validate the identity of a user of the user 
device (para. 0044(user's identity)); 

Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time of invention to demonstrate a method of user authentication, as taught by Meier, 
and show determining if said user device supports a user authentication protocol, as 
taught by Palekar, so that proper access can be granted according to authentication. 

Consider claims 11 and 36, Meier et al. clearly disclose and show a network 
access device comprising: 

a plurality of input ports (para. 0003 (access point; Examiner notes that AP has 
plurality of input ports)); 

a plurality of output ports (para. 0003 (access point; Examiner notes that AP has 
plurality of output ports)); 

a switching fabric for routing data received on the plurality of input ports to at 
least one of the plurality of output ports (para. 0003 (access point)); and 

placing the port into a semi-authorized access state (paragraph 0022 (default 
guest set)) the semi-authorized access state providing the user device with limits 
access (paragraph 0022 (restricted access)). 

However, Meier et al. do not specifically disclose determining if said user device 
supports a user authentication protocol. 

In the same field of endeavor, Palekar et al. clearly show control logic adapted 
to determine whether a user device coupled to one of the plurality of input ports 
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supports a user authentication protocol used by a host networl< (para. 0049 (if user 
supports authentication protocol)), and the determining comprising polling the user 
device for the user authentication protocol (para. 0049 (send a EAP request)), the user 
authentication protocol comprising a protocol to validate the identity of a user of the user 
device (para. 0044(user's identity)). 

Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time of invention to demonstrate a method of user authentication, as taught by Meier, 
and show determining if said user device supports a user authentication protocol, as 
taught by Palekar, so that proper access can be granted according to authentication. 

Claim 20. (Currently Amended) A network system, comprising: 

a host network (paragraph 0004 (network)) that uses a user authentication 
protocol (para. 0003 (RADIUS)); 

a network access device (fig. 3 (302), paragraph 0032 (WSTA attempting to gain 
access to AP)) communicatively coupled to the host network (paragraph 0032 
(attempting to gain access to AP)); and 

a user device (fig. 3 (302), paragraph 0032 (WSTA)) coupled to a port of the 
network access device (para. 0003 (assign a station)); 

placing the port in a semi-authorized access state, the semi-authorized access 
state providing the user device with limited network access (paragraph 0022 (restricted 
access)). 
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However, Meier et al. do not specifically disclose determining if said user device 
supports a user authentication protocol. 

In the same field of endeavor, Palekar et al. clearly show control logic adapted 
to determine whether a user device coupled to one of the plurality of input ports 
supports a user authentication protocol used by a host network (para. 0049 (If user 
supports authentication protocol)), and the determining comprising polling the user 
device for the user authentication protocol (para. 0049 (send a EAR request)), the user 
authentication protocol comprising a protocol to validate the identity of a user of the user 
device (para. 0044(user's Identity)). 

Therefore, it would have been obvious to a person of ordinary skill In the art at the 
time of invention to demonstrate a method of user authentication, as taught by Meier, 
and show determining if said user device supports a user authentication protocol, as 
taught by Palekar, so that proper access can be granted according to authentication. 



Consider claim 31, Meier et al. clearly disclose and show an apparatus 
comprising: 

means (paragraph 0010 (means)) for sensing a user device (fig. 3 (302), 
paragraph 0032 (AP receives a message from WSTA that it attempts to gain access to 
AP)) coupled to a port of a network access device (paragraph 0032 (attempting to gain 
access to AP)); and 
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means (paragraph 0010 (means)) for placing tlie port into a semi-autliorized 
access state (paragrapin 0022 (default guest set)) if it is determined that the user device 
does not support the user authentication protocol (paragraph 0022 (unauthorized guest 
WSTAs)), the semi-authorized access state providing the user device with limits access 
(paragraph 0022 (restricted access)). 

However, Meier et al. do not specifically disclose determining if said user device 
supports a user authentication protocol. 

In the same field of endeavor, Palekar et al. clearly show means for determining 
if the user device supports a user authentication protocol used by the host networl< 
(para. 0049 (if user supports authentication protocol)), the determining comprising 
polling the user device for the user authentication protocol (para. 0049 (send a EAR 
request)), the user authentication protocol comprising a protocol to validate the identity 
of a user of the user device (para. 0044(user's identity)); 

Therefore, it would have been obvious to a person of ordinary sl<ill in the art at the 
time of invention to demonstrate a method of user authentication, as taught by Meier, 
and show determining if said user device supports a user authentication protocol, as 
taught by Palekar, so that proper access can be granted according to authentication. 

Consider claims 32 and 41, Meier et al. clearly disclose a computer implemented 
method comprising: 
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at a network access device (fig. 3 (102)) communicably coupled to a liost 
network (paragrapln 0004 (network)), sensing a user device (fig. 3 (302), paragrapli 
0032 (WSTA attempting to gain access to AP)) coupled to a port of a network access 
device (paragraph 0032 (attempting to gain access to AP)); and 

placing the port into a semi-authorized access state (paragraph 0022 (default 
guest set)) the semi-authorized access state providing the user device with limits 
access (paragraph 0022 (restricted access)). 

However, Meier et al. do not specifically disclose determining if said user device 
supports a user authentication protocol. 

In the same field of endeavor, Palekar et al. clearly show determining if the user 
device supports a user authentication protocol used by the host network (para. 0049 (if 
user supports authentication protocol)), the determining comprising polling the user 
device for the user authentication protocol (para. 0049 (send a EAP request)), the user 
authentication protocol comprising a protocol to validate the identity of a user of the user 
device (para. 0044(user's identity)); 

Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time of invention to demonstrate a method of user authentication, as taught by Meier, 
and show determining if said user device supports a user authentication protocol, as 
taught by Palekar, so that proper access can be granted according to authentication. 



Consider claim 2, and as applied to claim 1 above, 
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claim 12, and as applied to claim 11 above, 

claim 21, and as applied to claim 20 above, 
Meier et al., clearly disclose and show a method, wherein said pre-configured network 
comprises a Voice over Internet Protocol (VoIP) network (paragraph 0003 (Voice over 
IP)). 

Consider claim 5, and as applied to claim 1 above, 

claim 15, and as applied to claim 11 above, 

claim 24, and as applied to claim 20 above, 
Meier et al., clearly disclose and show a method, wherein the placing comprises 
selectively placing said port into one of a plurality of semi-authorized access states 
(paragraph 0022 (default guest set)). 

Consider claim 6, and as applied to claim 5 above, 

claim 16, and as applied to claim 15 above, 
claim 25, and as applied to claim 24 above, 

Meier et al., clearly disclose and show a method, wherein the placing comprises: 
determining a type of the user device (paragraph 0008 (type of service for the 

wireless station)) ; and 

selectively placing said port into one of a plurality of semi-authorized access 

states (paragraph 0022 (default guest set)) based on the type of user device (paragraph 

0009 (identifies a type of service for the station). 
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Consider claim 7, and as applied to claim 6 above, 
claim 17, and as applied to claim 16 above, 
claim 26, and as applied to claim 25 above, 

Meier et a!., clearly disclose and show a method, wherein selectively placing comprises 
selectively placing the port into a semi-authorized access state (paragraph 0022 (default 
guest set)) that limits access by the user device to a network (paragraph 0022 
(restricted access)) comprising a Voice over Internet Protocol network (paragraph 0003 
(Voice over IP)). 

Consider claim 8, and as applied to claim 6 above, 

claim 18, and as applied to claim 16 above, 

claim 27, and as applied to claim 25 above, 
Meier et al., clearly disclose and show a method, wherein selectively placing comprises 
selectively placing the port into a semi-authorized access state (paragraph 0022 (default 
guest set)) that limits access by said user device (paragraph 0022 (restricted access)) 
to a network comprising the Internet (abstract (IP)) if said user device is a portable 
computing device (fig. 2 (208)). 

Consider claim 9, and as applied to claim 1 above, 
claim 19, and as applied to claim 11 above, 
claim 28, and as applied to claim 20 above. 
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Meier et al., clearly disclose and show a method, wherein said user authentication 
protocol is IEEE 802. 1x (paragraph 0029 (802.11)). 

Consider claim 10, and as applied to claim 1 above, 
claim 29, and as applied to claim 20 above, 
Meier et al., clearly disclose and show a method, wherein said network access device 
comprises a network switch (paragraph 95, lines 1-8 (network switches)). 

Consider claim 33, and as applied to claim 32 above, 
claim 37, and as applied to claim 36 above 
Meier et al. clearly disclose and show performing further user authentication in 
accordance with the user authentication protocol if it is determined that the user device 
is able to communicate using the user authentication protocol (paragraph 0021 (pass 
any authentication criteria defined for its SSID)). 

Consider claim 34, and as applied to claim 32 above, i 
claim 38, and as applied to claim 36 above, 
wherein the limited access comprises less access than access afforded a user device 
that is successfully authenticated using the user authentication protocol (para. 0019 
(differentiate for security purposes)). 

Consider claim 35, and as applied to claims 34 above. 
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claim 39, and as applied to claim 36 above, 
wherein the limited access comprises access to a low-security Virtual Local Area 
Network (VLAN) (para. 0019 (differentiate for security purposes)). 



Response to Arguments 

Applicant's arguments filed on 8/28/2009, with respect to claims 1 , 1 1 , 20, 30-32 
and 40-41, on pages 10-17 of the remarks, have been carefully considered. 

In the present application. Applicants basically argue, that Meier et al. do not 
teach or suggest "determining if the user device supports a user authentication protocol 
used by the host, the determining comprising polling the user device for the user 
authentication protocol, the user authentication protocol comprising a protocol to 
validate the identity of a user of the user device". The Examiner has modified the 
response with a new reference which provides "determining if the user device supports 
a user authentication protocol used by the host, the determining comprising polling the 
user device for the user authentication protocol, the user authentication protocol 
comprising a protocol to validate the identity of a user of the user device". See the 
above rejections of claims 1 , 1 1 , 20, 30-32 and 40-41 , for the relevant interpretation and 
citations found in Palekar et al., disclosing the new limitations. 
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Conclusion 

1 . THIS ACTION IS MADE FINAL. Applicant is reminded of tine extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 



Any response to this Office Action should be faxed to (571 ) 273-8300 or mailed 



Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 



Hand-delivered responses should be brought to 

Customer Service Window 
Randolph Building 
401 Dulany Street 
Alexandria, VA 22314 



Any inquiry concerning this communication or earlier communications from the 
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Examiner should be directed to Sai-Ming Chan whose telephone number is (571) 270- 
1769. The Examiner can normally be reached on Monday-Thursday from 6:30am to 
5:00pm. 

If attempts to reach the Examiner by telephone are unsuccessful, the Examiner's 
supervisor, Seema Rao can be reached on (571) 272-3174. The fax phone number for 
the organization where this application or proceeding is assigned is (571) 273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free) or 571-272-4100. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist/customer service whose telephone 
number is (571)272-2600. 

/Sai-Ming Chan/ 
Examiner, Art Unit 2462 
December 7, 2009 



/Kevin C. Harper/ 

Primary Examiner, Art Unit 2462 
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